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AMENDMENTS TO THE CLAIMS : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

LISTING OF CLAIMS : 

1. (Currently Amended) A method of securely implementing a public-key 
cryptography algorithm in a microprocessor-based system , the public key being composed 
of an integer n that is a product of two large prime numbers p and q, and of a public 
exponent e. said algorithm also including a private key, said method cons i sting i n 
determining a set E comprising a predetermined number of prime numbers e, that can 
correspond to the value of the public exponent e, sa i d method b ei ng charact e riz e d i n that i t 
compris e s and comprising the following steps cons i sting in : 

a) computing a value e = FI ei 

ei e E 

such that e/ei is less than 0(n) for any ej belonging to E, where O is the Euler totient function; 

b) applying the value e to a predetermined computation involving, as a modular 
product, only the modular product of e multiplied by said private key of the algorithm; 

c) for each testing whether the result of said predetermined computation is equal 
to a value e/e:. 

- if so, then attributing the value to e, and storing e with a view to it b ei ng us e d for 
subseouent use in computations of said cryptography algorithm; 

- otherwise, obs e rving indicating that the computations of the cryptography algorithm 
using the value e cannot be performed. 

2. (Currently Amended) A method according to claim 1, charact e r i z e d i n that wherein 
the cryptography algorithm is based on an RSA-type algorithm in standard mode. 

3. (Currently Amended) A method according to claim 2, characteriz e d i n that wherein 
the predetermined computation of step b) cons i sts in comprises computing a value C: 

C = e.d modulo 0(n), where d is the corresponding private key of the RSA algorithm 
such that e.d = 1 modulo 0(n) and O is the Euler totient function. 

4. (Currently Amended) A method according to claim 2, charact e riz e d i n that wherein 
the predetermined computation of step b) consists in comprises computing a value C: 
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C = e.d modulo 0{n), where d is the corresponding private key of the RSA algorithm 
such that e.d = 1 modulo D{n), with □ being the Carmichael function. 

5. (Currently Amended) A method according to claim 1 , characterized in that wherein 
the cryptography algorithm is based on an RSA-type algorithm in CRT mode. 

6. (Currently Amended) A method according to claim 5, charact e riz e d i n that wherein 
the predetermined computation of step b) cons i sts in comprises computing a value C: 

C = e.dp modulo (p-1). where dp is the corresponding private key of the RSA 
algorithm such that e.dp = 1 modulo (p-1). 

7. (Currently Amended) A method according to claim 5. charact e riz e d i n that wherein 
the predetermined computation of step b) cons i sts in comprises computing a value C: 

C = e.dq modulo (q-1). where dq is the corresponding private key of the RSA 
algorithm such that e.dq = 1 modulo (q-1). 

8. (Currently Amended) A method according to claim 5, charact e rized in that wherein 
the predetermined computation of step b) consists i n comprises computing two values Ci 
and C2 such that: 

Ci = e.dp modulo (p-l), where dp is the corresponding private key of the RSA 
algorithm such that e.dp = 1 modulo (p-1); 

C2 = e.dq modulo (q-1 ), where dq is the corresponding private key of the RSA 
algorithm such that e.dq = 1 modulo (q-1); 

and i n that wherein the test step c) consists comprises , for each e\, m testing whether 
Ci and/or C2 is equal to the value e/eji 

- if so. then attributing the value e\ to e and storing e with a v ie w to i t being usod for 
subsequent use in computations of said cryptography algorithm; 

- othenrt/ise, obs e rv i ng indicating that the computations of said cryptography 
algorithm using the value e cannot be performed. 

9. (Currently Amended) A method according to claim 3 or c l aim A and in which a 
value ei has been attributed to e, sa i d mothod bo i ng charact e r i z e d in that wherein the 
computations using the value e consist i n comprise : 

choosing a random integer r; 

computing a value d* such that d* = d+r.(e.d-1); and 
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implementing a private operation of the algorithm in which a value x is obtained from 
a value y by applying the relationship x = y*^* modulo n. 

10. (Currently Amended) A method according to any ono of cla i mc 2 to A, and claim 
2^ in which a value e; has been attributed to e, said m e thod b ei ng charactorizod i n that it 
cons i stG and further includino the step , after a private operation of the algorithm, m of 
obtaining a value x from a value y, and i n that wherein the computations using the value e 
cons i st i n comprise checking whether x® = y modulo n. 

1 1 . (Currently Amended) A method according to any on e of cla i ms 5 to 8, and claim 
5^ in which a value ej has been attributed to e, charact e r i z e d i n that it cons i sts and further 
including the step , after a private operation of the algorithm, m of obtaining a value x from a 
value y, and i n that wherein the computations using the value e consist i n comprise checking 
firstly whether x® = y modulo p and second l y whether x® = y modulo q. 

12. (Currently Amended) A method according to any pr e c e ding c l aim, charact e r i z e d 
in that claim 1 . wherein the set E comprises at least the following e\ values: 3, 17, 2^®+1 . 

13. (Currently Amended) An electronic component charactor i zod i n that i t comprises 
comprising means for implementing the method according to any preced i ng claim 1. 

14. (Currently Amended) A smart card including a« the electronic component 
according to of claim 1 3. 

15. (Currently Amended) A method of securely implementing a public-key 
cryptography algorithm in a microprocessor-based svstem . the public key being composed 
of an integer n that is a product of two large prime numbers p and q, and of a public 
exponent e, said method consist i ng in determining a set E comprising a predetermined 
number of prime numbers ej that can correspond to the value of the public exponent e, BaA4 
method be i ng charact e r i z e d in that i t comprisos and comprising the following steps 
cons i st i ng i n : 

a) choosing a value Oi from the values of the set E; 

b) if 5(p)= 5(q). where Sft 5{n), 5(p), and 5(q) are functions giving the number of 
bits encoding respectively the number n, the number p. and the number q, testing whether 
the chosen ej value satisfies the relationship: 
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(1-ei.d)modulo n < ei.2^*^"^2>*' 
or said relationship as simplified: 
(-ei.d)modulo n < ei.2^*^">^^*' 

wh e r e 5(p), 5(q), and 5(n) ar e th e funct i ons giving tho numb e rs of bito r e spect i ve l y 
encod i ng th e numb e r p, tho numb e r q, and tho numb e r n; 

c) if the test relationship applied in the' preceding step is satisfied and so , defining 
e = ej. and storing e w i th a vi e w to using i t for subsequent use in computations of said 
cryptography algorithm; 

- otherwise, reiterating the preceding steps while choosing another value for e, from 
the set E until an e; value can be attributed to e and, if no e\ value can be attributed to e, then 
obs e rv i ng indicating that the computations of said cryptography algorithm using the value of 
e cannot be performed. 

16. (Currently Amended) A method of securely implementing a public-key 
cryptography algorithm according to claim 15, charact e riz e d i n that it consists in p e rforming 
wherein step b is performed in the following manner when 5(p)[[#]] ^5(q), i.e. when p and q 
are unbalanced, testing whether the chosen ej value satisfies the following relationship: 

(1-ei.d) modulo n < ei.29*^ 

or said relationship as simplified: 

(-ei.d) modulo n < 

with g=max (5(p), 5(q)), if 5(p) and 5(q) are known, or, otherwise, with g=5(n)/2+t. 
where t designates the imbalance factor or a limit on that factor^ 

17. (Currently Amended) A method according to cla i m 15 or claim 16, charact e r i z e d 
in that wherein , for all values of i, ei^2^^+1 , and i n that th e step b) is replaced by another test 
step cons i st i ng in comprising : 

b) if 5(p)=5(q). testing whether the chosen ej value satisfies the relationship: 
(l-ei.d)modulo n < ea^^^^v^^*'-^ 
or said relationship as simplified: 
(-e,d)modulo n < e|.2f^f"^'2)*i7 

where 5(p), 5(q), and 5(n) are the functions giving the numbers of bits respectively 
encoding the number p, the number q, and the number n; 

otherwise, when p and q are unbalanced, testing whether the chosen ei value 
satisfies the following relationship: 

(1-ej.d) modulo n < ei.29*'^ 
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or said relationship as simplified: 
(-ej.d) modulo n < ei.2^*^^ 

with g=max (5(p).5(q)), if 5(p) and 5(q) are known, or, otherwise, with g=5(n)/2+t, 
where t designates the imbalance factor or a limit on that factor. 

18. (Currently Amended) A method according to c l aim 15 or claim 16. charact e r i z e d 
i n that wherein step b) is replaced with another test step cons i st i ng i n comprising : 

testing whether the chosen e; value satisfies the relationship whereby: 

a predetermined number of the first most significant bits of (l-ej.d) modulo n are zero; 

or said relationship as simplified whereby: 

said predetermined number of the first most significant bits of (-ej.d) modulo n are 

zero. 

19. (Currently Amended) A method according to claim 18, charact e r i z e d i n that 
wherein the test is performed on the first 128 most significant bits. 

20. (Currently Amended) A method according to any on e of cla i ms 15 to 1 9 , 
charact e r i z e d i n that claim 15, wherein the cryptography algorithm is based on an RSA-type 
algorithm in standard mode. 

21. (Currently Amended) A method according to any on e of cla i ms 15 to 20, and i n 
which claim 15 wherein, when an e\ value has been attributed to e. said m e thod b ei ng 
charact e r i z e d i n that the computations using the value e consist i n comprise : 

- choosing a random integer r; 

- computing a value d* such that d* = d+r.(e.d-1); 

implementing a private operation of the algorithm in which a value x is obtained from 
a value y by applying the relationship x = y^* modulo n. 

22. (Currently Amended) A method according to any on e of c l aims 15 to 20 and i n 
which claim 15 wherein, when an e\ value has been attributed to e. said m e thod b ei ng 
charact e r i z e d i n that i t consists, after a private operation of the algorithm, i n obta i ning a 
value X is obtained from a value y and i n that the computations using the value e consist i n 
comprise checking whether x© = y modulo n. 



Attorney's Docket No. 1032326>000330 
Application No. Unassioned 
Page 10 



23. (Currently Anaended) A method according to any ono of cla i ms 1 5 to 22, 
character i z e d i n that claim 15. wherein the set E comprises at least the following Oj values: 3, 
17. 2'®+1. 

24. (Currently Amended) A method according to claim 23, charaotorizod i n that 
wherein the preferred choice of the values ei from the values of the set E is made in the 
following order: 2^®+1, 3, 17. 

25. (Currently Amended) An electronic component charact e r i zod i n that it comprises 
comprising means for implementing the method according to any on e of c l aims 1 5 to 2^ 
claim 15 . 

26. (Currently Amended) A smart card including ao the electronic component 
according to of claim 25 . 

27. (New) A method according to claim 15. wherein, for all values of i, ei^2^^+1 . step 
b) is replaced by another test step comprising: 

b) if 5(p)=5(q), testing whether the chosen Oj value satisfies the relationship: 
(l-ei.d)modulo n < ei.2<^^"^^^*^^ 
or said relationship as simplified: 
(-ei.d)modulo n < e|.2^*^"^^^*'^ 

where 5(p), 5(q), and 5{n) are functions giving the numbers of bits respectively 
encoding the number p, the number q, and the number n; 

otherwise, when p and q are unbalanced, testing whether the chosen ei value 
satisfies the following relationship: 

(1-ei.d) modulo n<ei.29^^^ 

or said relationship as simplified: 

(-ei.d) modulo n < e^^*''' 

with g=max (5(p).5(q)), if 5(p) and 5(q) are known, or, otherwise, with g=6(n)/2+t, 
where t designates the imbalance factor or a limit on that factor. 

28. (New) A method according to claim 15. wherein step b) is replaced with another 
test step comprising: 

testing whether the chosen ei value satisfies the relafionship whereby: 

a predetermined number of the first most significant bits of (l-ej.d) modulo n are zero; 
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or said relationship as simplified whereby: 

said predetermined number of the first most significant bits of (-ei.d) modulo n are 

zero. 

29. (New) A method according to claim 4 and in which a value Oj has been attributed 
to e, wherein the computations using the value ecomprise: 
choosing a random integer r; 
computing a value d* such that d* = d+r.(e.d-1); and 

implementing a private operation of the algorithm in which a value x is obtained from 
a value y by applying the relationship x = y^* modulo n. 



